Autonomous System Provider Authorization

$ rpki-client -vvf repo.rpki.space/repo/Netiface/3/AS60223.asa
File:                     AS60223.asa (raw, json)
Hash identifier:          azt/7NRh9JNFe1ENwUnQ8ziXehMEmpcyeWDtmUB2X64=
Subject key identifier:   A6:7D:31:66:5D:56:39:B2:54:DE:87:A1:B2:43:94:30:30:66:6D:71
Certificate issuer:       /CN=a640aa61f1d62b9c940459804ae11be99ad43842
Certificate serial:       5558E4927FC983DA698B46C8017427E7FA4A1138
Authority key identifier: A6:40:AA:61:F1:D6:2B:9C:94:04:59:80:4A:E1:1B:E9:9A:D4:38:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer
Subject info access:      rsync://repo.rpki.space/repo/Netiface/3/AS60223.asa
Signing time:             Sat 14 Dec 2024 12:44:43 +0000
ASPA not before:          Sat 14 Dec 2024 12:39:43 +0000
ASPA not after:           Sat 13 Dec 2025 12:44:43 +0000
Customer ASID:            60223
Providers:                AS: 945
                          AS: 49581
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.crl
                          rsync://repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 21:03:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:58:e4:92:7f:c9:83:da:69:8b:46:c8:01:74:27:e7:fa:4a:11:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a640aa61f1d62b9c940459804ae11be99ad43842
        Validity
            Not Before: Dec 14 12:39:43 2024 GMT
            Not After : Dec 13 12:44:43 2025 GMT
        Subject: CN=A67D31665D5639B254DE87A1B243943030666D71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f5:9f:f0:9c:cd:07:8e:23:84:7b:61:a4:71:
                    59:83:9f:4b:2a:86:24:72:f0:bf:46:71:39:fa:7b:
                    e6:c6:38:60:5c:f7:b8:cf:ca:26:c2:03:42:54:72:
                    e7:44:2e:4f:f2:68:87:a7:ce:1f:ff:f8:ae:26:5c:
                    bb:fe:2d:5c:9e:ca:62:b2:77:70:88:66:ee:a9:5f:
                    20:45:e3:f7:a2:30:b0:66:95:5f:65:25:02:70:f7:
                    7a:d0:01:60:f7:e3:4e:be:29:db:ca:8f:3f:a4:3c:
                    6a:cc:57:41:1c:a1:8e:fc:a4:27:fe:88:67:ef:6b:
                    a4:0b:5b:3c:f6:d9:77:15:68:19:4f:59:30:8a:fc:
                    6a:19:1c:d7:c3:5d:15:14:0c:a9:13:e8:02:97:95:
                    67:8c:7e:44:91:59:11:47:35:29:15:fc:b7:e2:35:
                    a2:03:50:3a:41:c0:9f:53:a9:ec:c2:15:54:6e:95:
                    a8:4c:9f:3e:af:24:8b:df:7c:e8:04:06:41:05:6b:
                    b6:71:50:eb:d4:3a:50:76:dd:34:c3:81:f2:1d:5e:
                    80:99:ba:a0:8c:ba:db:11:44:bd:81:4a:f1:82:65:
                    2f:dd:ce:23:07:90:ba:26:a3:99:2b:6b:4a:4e:4c:
                    07:39:b8:5b:23:42:23:87:c4:6e:00:99:25:d7:a5:
                    04:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7D:31:66:5D:56:39:B2:54:DE:87:A1:B2:43:94:30:30:66:6D:71
            X509v3 Authority Key Identifier:
                keyid:A6:40:AA:61:F1:D6:2B:9C:94:04:59:80:4A:E1:1B:E9:9A:D4:38:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Netiface/3/AS60223.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60223

    Signature Algorithm: sha256WithRSAEncryption
         bb:e2:84:98:ee:2c:5c:2c:5c:a7:58:93:bc:4b:c6:1d:e8:ca:
         99:3e:14:53:5a:4d:04:5e:0d:e8:11:6b:b9:c3:70:00:39:23:
         4f:a8:fe:5d:27:67:fe:a4:5d:7d:4c:84:bf:ac:f2:8a:43:8e:
         42:0a:dc:38:f4:4a:5a:d6:2b:e3:c9:97:75:88:70:ae:36:b9:
         9e:0f:eb:8d:c8:55:87:ab:97:c9:be:92:ab:d7:ba:7d:e2:52:
         f9:ca:5a:2c:64:67:25:c2:79:70:32:a5:2e:90:6b:82:fd:7c:
         b2:79:f4:ab:aa:35:4d:3d:6f:6a:a4:64:a0:16:28:6a:cb:22:
         9e:4e:52:6c:fa:2f:4e:d7:8a:92:5b:bd:07:6d:2a:ef:24:ae:
         5f:5c:12:df:65:25:18:61:f9:b5:25:e6:57:34:4a:3c:fe:3a:
         0d:75:38:d3:26:c9:c2:43:8f:b5:85:93:e6:5e:be:57:ca:a2:
         97:aa:53:52:fc:aa:4d:dd:be:7e:57:47:87:50:c7:7f:45:1e:
         e5:ae:15:a2:d2:2f:44:3b:e7:4f:83:16:b5:51:7b:d1:6d:22:
         60:b1:4c:3b:f1:0e:00:47:af:e2:4a:60:ce:d5:17:ce:71:43:
         77:19:ee:29:ec:70:c8:74:d5:b9:5c:39:b5:af:11:61:cb:d6:
         83:bb:07:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:38:30 2025 by rpki-client